v1

Documentation

Index

• Constants
• func Authorizator(data interface{}, c *gin.Context) bool
• func GenerateAPIKey(n int) (string, error)
• func HashSHA512(str string) string
• func IdentityHandler(c *gin.Context) interface{}
• func PayloadFunc(data interface{}) jwt.MapClaims
• func Unauthorized(c *gin.Context, code int, message string)
• type APIKey
  • func NewAPIKey(dbClient *database.Client) *APIKey
  • func (a *APIKey) MiddlewareFunc() gin.HandlerFunc
• type CRLChecker
  • func NewCRLChecker(crlPath string, onLoad func(), logger *log.Entry) (*CRLChecker, error)
• type JWT
  • func NewJWT(dbClient *database.Client) (*JWT, error)
  • func (j *JWT) Authenticator(c *gin.Context) (interface{}, error)
• type Middlewares
  • func NewMiddlewares(dbClient *database.Client) (*Middlewares, error)
• type OCSPChecker
  • func NewOCSPChecker(logger *log.Entry) *OCSPChecker
• type RevocationCache
  • func NewRevocationCache(expiration time.Duration, logger *log.Entry) *RevocationCache
  • func (rc *RevocationCache) Empty()
  • func (rc *RevocationCache) Get(cert *x509.Certificate) (error, bool)
  • func (rc *RevocationCache) Set(cert *x509.Certificate, err error)
• type TLSAuth
  • func NewTLSAuth(allowedOus []string, crlPath string, cacheExpiration time.Duration, ...) (*TLSAuth, error)
  • func (ta *TLSAuth) ValidateCert(c *gin.Context) (string, error)

Constants

const (
	APIKeyHeader      = "X-Api-Key"
	BouncerContextKey = "bouncer_info"
)

const MachineIDKey = "id"

Functions

func Authorizator

func Authorizator(data interface{}, c *gin.Context) bool

func GenerateAPIKey

func GenerateAPIKey(n int) (string, error)

func HashSHA512

func HashSHA512(str string) string

func IdentityHandler

func IdentityHandler(c *gin.Context) interface{}

func PayloadFunc

func PayloadFunc(data interface{}) jwt.MapClaims

func Unauthorized

func Unauthorized(c *gin.Context, code int, message string)

Types

type APIKey

type APIKey struct {
	HeaderName string
	DbClient   *database.Client
	TlsAuth    *TLSAuth
}

func NewAPIKey

func NewAPIKey(dbClient *database.Client) *APIKey

func (*APIKey) MiddlewareFunc

func (a *APIKey) MiddlewareFunc() gin.HandlerFunc

type CRLChecker

type CRLChecker struct {
	// contains filtered or unexported fields
}

func NewCRLChecker

func NewCRLChecker(crlPath string, onLoad func(), logger *log.Entry) (*CRLChecker, error)

type JWT

type JWT struct {
	Middleware *jwt.GinJWTMiddleware
	DbClient   *database.Client
	TlsAuth    *TLSAuth
}

func NewJWT

func NewJWT(dbClient *database.Client) (*JWT, error)

func (*JWT) Authenticator

func (j *JWT) Authenticator(c *gin.Context) (interface{}, error)

type Middlewares

type Middlewares struct {
	APIKey *APIKey
	JWT    *JWT
}

func NewMiddlewares

func NewMiddlewares(dbClient *database.Client) (*Middlewares, error)

type OCSPChecker

type OCSPChecker struct {
	// contains filtered or unexported fields
}

func NewOCSPChecker

func NewOCSPChecker(logger *log.Entry) *OCSPChecker

type RevocationCache

type RevocationCache struct {
	// contains filtered or unexported fields
}

func NewRevocationCache

func NewRevocationCache(expiration time.Duration, logger *log.Entry) *RevocationCache

func (*RevocationCache) Empty

func (rc *RevocationCache) Empty()

func (*RevocationCache) Get

func (rc *RevocationCache) Get(cert *x509.Certificate) (error, bool)

func (*RevocationCache) Set

func (rc *RevocationCache) Set(cert *x509.Certificate, err error)

type TLSAuth

type TLSAuth struct {
	AllowedOUs []string
	// contains filtered or unexported fields
}

func NewTLSAuth

func NewTLSAuth(allowedOus []string, crlPath string, cacheExpiration time.Duration, logger *log.Entry) (*TLSAuth, error)

func (*TLSAuth) ValidateCert

func (ta *TLSAuth) ValidateCert(c *gin.Context) (string, error)